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TABLE 1 


RESOURCE 
NAME 


PRINCIPAL NAMES/ I.D.'s 

FOR THOSE ALLOWED ACCESS TO THE RESOURCE 


A 


I.D.I , I.D.2, I.D.3, ... 


B 


I.D.2, I.D.4, ... 


C 

• 


• 


• 
• 


• 
• 




TABLE 2 


I.D. 


CACHED RIGHTS 


I.D.3 


X, Y,Z 



{Fig- 



TABLE 3 


I.D. 


CACHED RESOURCE OBJECT 


I.D.3 
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( START ) 



900 



902 



904 

906 
908 



ACCESSING, BY AN AGENT, A DIRECTORY SERVICE, WHEREIN 
THE AGENT IS LOCATED ON A DEPUTIZATION POINT, WHEREIN 

THE DEPUTIZATION POINT IS COUPLED TO THE DIRECTORY 
SERVICE, AND WHEREIN THE DIRECTORY SERVICE COMPRISES 
RIGHTS OF A PRINCIPAL TO A RESOURCE 



UPDATING, BY THE AGENT, THE RIGHTS TO AN ACCESS CONTROL 
LIST CACHE, WHEREIN THE ACCESS CONTROL LIST CACHE IS 
COUPLED TO THE DEPUTIZATION POINT AND TO THE PRINCIPAL 



RECEIVING, AT THE ACCESS CONTROL LIST CACHE, A 
REQUEST FROM THE PRINCIPAL FOR THE RIGHTS 



RETRIEVING, BY THE ACCESS CONTROL LIST CACHE, THE RIGHTS 



FORWARDING, TO THE PRINCIPAL, THE RIGHTS 



Fig. 11 



( START ) 



1000- 



1002 



1004- 



INVOKING, BY THE DIRECTORY SERVICE, A 
RESOURCE MANAGER, IF A FIRST TABLE DOES NOT 
CONTAIN THE PRINCIPAL THAT HAS ACCESS TO THE 

RESOURCE, WHERE THE RESOURCE MANAGER 
COMPRISES ACCESS INFORMATION AND RIGHTS OF 
THE PRINCIPAL TO THE RESOURCE 



MAPPING, BY THE RESOURCE MANAGER, AN 
ACCESS CONTROL OF THE RIGHTS IN THE 
RESOURCE MANAGER TO AN ACCESS CONTROL 
OF THE RIGHTS IN THE DIRECTORY SERVICE 



UPDATING, BY THE RESOURCE MANAGER, THE 
MAPPED ACCESS CONTROL OF THE RIGHTS 
TO THE ACCESS CONTROL LIST CACHE 



Fig. 12 



